Exploit for Link Following in Redhat Automatic_Bug_Reporting_Tool

CVE-2015-5287 RHEL 7.0/7.1 - 'abrt/sosreport' Local Privilege...

semgrep v1.175.0

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

OA-tongda-RCE

OA-tongda-RCE | Office Anywhere नेटवर्क स्मार्ट ऑफिस सिस्टम बैकएंड GetShell कोई प्रमाणीकरण आवश्यक नहीं 1. मनमाना फ़ाइल अपलोड भेद्यता /ispirit/im/upload.php 2. स्थानीय फ़ाइल समावेशन भेद्यता /ispirit/interface/gateway.php कमांड निष्पादन बायपास: root@kitploit: exec"cmd /c ".$command; $stdout =...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - Estouro de Buffer na Pilha do MavlinkLogHandler do PX4 Autopilot DoS -orange -blue 📜 Descrição CVE-2026-32743 é um estouro de buffer baseado em pilha no MavlinkLogHandler das versões ≤1.17.0-rc2 do PX4 Autopilot. O buffer LogEntry.filepath tem apenas 60 bytes , mas sscanf analisa...

CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection

CVE-2026-25546 PoC - godot-mcp OS Command Injection Autore: Mohammed Idrees Banyamer GitHub: mbanyamer Data: 04 febbraio 2026 Titolo dell'Exploit godot-mcp 0.1.1 - OS Command Injection tramite projectPath CVE CVE-2026-25546 CWE CWE-78 Neutralizzazione impropria di elementi speciali utilizzati in ...

CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – PoC zur Argument-Injection / OS-Command-Injection im Cybersecurity AI CAI Framework Autor: Mohammed Idrees Banyamer Land: Jordanien GitHub: https://github.com/yourusername Instagram: @banyamersecurity Überblick Dieses Repository enthält einen Proof of Concept PoC, der eine...

tryhackme-ctf-writeups

TryHackMe Write-Ups Thirteen rooms, solved and then explain...

CVE-2021-42013

CVE-2021-42013 विवरण यह स्क्रिप्ट CVE-2021-42013 का शोषण करके फ़ाइल प्रिंट करने या/और कमांड निष्पादित करने के लिए है। यह स्क्रिप्ट निम्नलिखित के लिए उपलब्ध है: Nmap Python Ruby आवश्यकताएँ Python python3 python3 मानक पुस्तकालय Ruby Ruby Ruby मानक पुस्तकालय स्थापना root@kitploit: git clone...

CVE-2026-0834

CVE-2026-0834 PoC Bypass dell'autenticazione del protocollo di debug dei dispositivi TP-Link TDDP CVE-2026-0834 Panoramica Una vulnerabilità nel servizio TDDP TP-Link Device Debug Protocol consente a utenti remoti non autenticati sulla rete locale di eseguire comandi amministrativi. Quando si...

CVE-2021-41773

CVE-2021-41773 Beschreibung Dieses Skript nutzt CVE-2021-41773 aus, um Dateien auszulesen und/oder Befehle auszuführen. Dieses Skript ist verfügbar für: Nmap Python Ruby Anforderungen Python python3 python3 Standardbibliothek Ruby Ruby Ruby Standardbibliothek Installation root@kitploit: git clone...

PoC-CVE-2026-21858

PoC-CVE-2026-21858 n8n è una piattaforma open source di automazione dei flussi di lavoro. Le versioni dalla 1.65.0 fino alla 1.121.0 consentono a un attaccante di accedere ai file sul server sottostante tramite l'esecuzione di determinati flussi di lavoro basati su moduli. Un flusso di lavoro...

Vulnerabilities in Apache CloudStack

Apache has identified several vulnerabilities in Apache CloudStack, specifically in versions 4.12.0.0 through 4.22.1.0. These vulnerabilities include OS command injection in the NAS backup provider plugin, Server-Side Request Forgery SSRF in various modules such as metalink mirror URL resolution...

BIT-NEO4J-ENTERPRISE-2026-1497 Incorrect privilege assignment in composite databases

Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intends to give a user an access to a remote database constituent "namespace.name" will inadvertently grant access to any...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 3.0.0 Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular...

vulnerabilities in Adobe Campaign Classic

Adobe has identified several vulnerabilities in Adobe Campaign Classic. These vulnerabilities involve Server-Side Request Forgery SSRF and OS Command Injection. The SSRF vulnerability allows attackers to manipulate requests on the server, which can lead to the execution of arbitrary code without...

CVE-2021-45897

CVE-2021-45897 PoC per CVE-2021-45897 noto anche come SCRMBT-180 - RCE tramite modelli email solo utenti autenticati in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897...

Twenty-Three-Scanner

🛰️ Twenty-Three Scanner Uno scanner Potente , Veloce ed Elegante per rilevare servizi Telnetd vulnerabili affetti da CVE-2026-24061. Realizzato con la pura libreria standard di Python - zero dipendenze esterne richieste. -A32D2A?style=for-the-badge 🔗 Indice dei Contenuti ⚖️ Licenza 🧩...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 – OpenCode Unauthenticated RCE Nuclei-Vorlage zum Scannen. Burp-Suite-Anfrage root@kitploit: POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 root@kitploit: POST /session/"id"/shell...

Vulnerabilities found in Ubiquiti’s UniFi products

Ubiquiti has identified vulnerabilities in various UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge, and UniFi Talk. The...

exploit-CVE-2026-23744

exploit-CVE-2026-23744 MCPJam Inspector ist eine lokale Entwicklungsplattform für MCP-Server. In Version 1.4.2 und früher ermöglicht ein RCE-Fehler Angreifern, manipulierte HTTP-Anfragen zu senden, die einen MCP-Server installieren und Code remote ausführen, da der Dienst standardmäßig auf 0.0.0....